CVE-2021-30840

This CVE (CVE-2021-30840) concerns Apple’s FontParser handling of dfont files. A maliciously crafted dfont could lead to arbitrary code execution due to a vulnerability in font processing. Apple indicates the issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Connected sources also align...

CVE-2021-30831

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2021-30831

CVE-2021-30831 concerns Apple’s FontParser, where processing a maliciously crafted font could cause an out-of-bounds read leading to disclosure of process memory. The connected Apple Watch content explicitly ties this CVE to FontParser and notes the underlying issue as an out-of-bounds read addre...

CVE-2021-30823

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS...

CVE-2021-30823

CVE-2021-30823 is a logic issue in WebKit that allowed bypassing HSTS when processing web content. It is addressed in macOS Monterey 12.0.1, iOS 14.8/iPadOS 14.8, tvOS 15, Safari 15, and watchOS 8. Connected sources also list WebKitGTK+ and Apple advisories referencing the same CVE as part of a b...

CVE-2021-30823

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS...

CVE-2021-30823

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS...

CVE-2021-30814

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30818

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30818

CVE-2021-30818 is a type confusion vulnerability in WebKitGTK/WebKit, leading to arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms (iOS 14.8+, iPadOS 14.8+, Safari 15+, watchOS 8, tvOS 15) and is correlated with WebKitGTK/WebKit fixes in Linux p...

CVE-2021-30818

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30808

This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malicious application may be able to modify protected parts of the file system...

CVE-2021-30808

CVE-2021-30808 is an Apple sandbox vulnerability. A malicious application could modify protected parts of the file system. Patched in tvOS 15, watchOS 8, iOS 15, and iPadOS 15; root cause described as an issue in Sandbox with improved checks. Exploitation status is not provided in the supplied do...

CVE-2021-30809

CVE-2021-30809 is a WebKit/WebKitGTK use-after-free vulnerability. The Debian/AlmaLinux/Amazon advisories and Debian security tracker describe it as a use-after-free issue in WebKitGTK that could allow arbitrary code execution when processing malicious web content, with fixes implemented in Safar...

CVE-2021-30809

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30809

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30818: Access of Resource Using Incompatible Type

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30814: Out-of-bounds Write

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30831: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2021-30834: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file may result in unexpected application termination or arbitrary code execution...